TP-LINK loses control of two device configuration domains
https://www.helpnetsecurity.com/2016/07/05/tp-link-config-domains/
"A TP-LINK router or extender should intercept requests to
tplinklogin.net and tplinkextender.net and direct them to the
router/extender rather than the Internet," he noted. His
testing revealed that that was, indeed, correct, and users
would be taken to the devices' internal logon page/
administrative website. It's everybody else that, should the
domains turn malicious, will be in danger. "Anyone not
connected to a TP-LINK router, that goes to tplinklogin.net,
will see a public Internet web page rather than their routers
internal logon page. Currently that page is an advertisement,
but it could turn malicious at any time," Horowitz pointed
out.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
